HackingCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
USG Insurance Services
bd_40a33d471bf9ea36 · schema v1 · pii pii-v1
Full breach record for USG Insurance Services →USG Insurance Services, Inc. discovered unauthorized access to its network on October 27, 2020. The incident potentially exposed personally identifiable information (PII) of auto and garage policyholders' employees, including names, addresses, dates of birth, driver's license/state ID numbers, and Social Security numbers. USG engaged forensic investigators, implemented enhanced security measures, and offered 12 months of identity monitoring via Kroll.
California clockDiscovered Oct 27, 2020 → Notified Dec 18, 202052d ✓ CA 60-day OK22 weeks discovery → filing
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_d741dc55331a75d5Montana State AGfiled 2021-04-01Candidate
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-539658
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Apr 1, 2021
- Raw hash
- fe95f11923defeabbb7995e38a99b687ceb6f69d49f915dbb3b82e79d27282e4
Reporting entity
- Name
- USG Insurance Servicesnorm: usg insurance
Victim entity
- Name
- USG Insurance Servicesnorm: usg insurance
Incident
- Discovered
- Oct 27, 2020
- Materiality determined
- —
- Notification sent
- Dec 18, 2020
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
Compliance
- Time to disclose
- 22 weeks(156 days from discovery to filing)
- Compliance flags
- CA 60-day OK · 52d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Oct 27, 2020→ Notified: Dec 18, 202052d 60 days (analyst band, pre-2026 discoveries) CA 60-day OK
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.